Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/64c431-5330-437b-b207-28fecc63398c/1/irW5qTaHl6hrrryB9iOz9OeG9Ro.mft
File: irW5qTaHl6hrrryB9iOz9OeG9Ro.mft (raw, json)
Hash identifier: T+8rjYNSevAJnGX22ZMyQ+0Q33T2jVMGjl8C83uKGX8=
Subject key identifier: E3:A3:CD:81:87:D5:75:90:71:20:F8:64:9F:C7:4F:BE:F9:DA:0C:FF
Authority key identifier: 8A:B5:B9:A9:36:87:97:A8:6B:AE:BC:81:F6:23:B3:F4:E7:86:F5:1A
Certificate issuer: /CN=8ab5b9a9368797a86baebc81f623b3f4e786f51a
Certificate serial: 019CAD594E02756C900FC39E2440F9C11D7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/irW5qTaHl6hrrryB9iOz9OeG9Ro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/64c431-5330-437b-b207-28fecc63398c/1/irW5qTaHl6hrrryB9iOz9OeG9Ro.mft
Manifest number: 0C9F
Signing time: Mon 02 Mar 2026 07:00:36 +0000
Manifest this update: Mon 02 Mar 2026 07:00:36 +0000
Manifest next update: Tue 03 Mar 2026 07:00:36 +0000
Files and hashes: 1: 1-pZ-LCxKwG1Hr4KnbmHCrK_vxKA.roa (hash: NNYlHfIxan1j/0zIjX+X1sunYONMC/0x7QAxXByYowU=)
2: Besyfcp0ocXXZR4bgBvGDpNq_18.roa (hash: urkG1FiIsn6s09W2B2I+KU16rioSe6pO4WMymlPytjA=)
3: irW5qTaHl6hrrryB9iOz9OeG9Ro.crl (hash: f/byBNsj8awWAiwWqnnoEqv2MWPyyV3V5bGujcWu9dM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/64c431-5330-437b-b207-28fecc63398c/1/irW5qTaHl6hrrryB9iOz9OeG9Ro.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/64c431-5330-437b-b207-28fecc63398c/1/irW5qTaHl6hrrryB9iOz9OeG9Ro.mft
rsync://rpki.ripe.net/repository/DEFAULT/irW5qTaHl6hrrryB9iOz9OeG9Ro.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 07:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:59:4e:02:75:6c:90:0f:c3:9e:24:40:f9:c1:1d:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ab5b9a9368797a86baebc81f623b3f4e786f51a
Validity
Not Before: Mar 2 07:00:36 2026 GMT
Not After : Mar 3 07:00:36 2026 GMT
Subject: CN=e3a3cd8187d575907120f8649fc74fbef9da0cff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:bc:26:0f:b9:4d:06:74:bb:25:6b:73:1c:01:
32:b3:e0:85:17:70:ef:25:ce:c9:fc:25:38:a8:fb:
80:a6:3b:69:63:ea:5b:a8:c0:49:9d:e6:f0:c4:ce:
9c:43:cf:47:f4:00:f9:64:cd:90:ef:ce:4c:4b:3a:
07:ca:c6:a7:df:59:76:c3:98:61:bb:1c:3c:b8:1f:
fe:f0:d3:5c:c7:87:f0:b3:e1:41:21:de:83:ad:3b:
ca:ab:b5:30:01:86:57:a5:67:30:e5:ef:d6:b8:42:
0d:1c:fe:a3:2f:3c:9a:16:4d:87:77:cb:e0:69:17:
f2:e3:1f:98:0c:8d:4a:b3:dc:1c:99:46:e2:84:ff:
26:70:c3:5b:e9:bf:40:91:a0:01:02:dc:b3:82:56:
b8:8c:2a:6b:6d:93:be:93:c3:94:45:5f:0d:71:26:
cb:a6:dd:58:a1:84:b8:de:0f:51:1a:91:58:12:7f:
ba:0a:4a:0b:2b:f7:b7:67:74:99:1d:15:92:dd:e1:
4d:a9:ff:41:38:b6:7d:fc:f4:f0:ce:1c:6b:b2:b5:
9d:73:ce:50:12:0b:38:b1:df:4e:99:91:2a:83:c2:
c0:7d:be:96:20:0a:f8:97:f1:20:3f:b3:c3:df:24:
44:e9:57:fe:a0:f4:9e:61:25:30:62:7b:91:6d:b0:
59:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:A3:CD:81:87:D5:75:90:71:20:F8:64:9F:C7:4F:BE:F9:DA:0C:FF
X509v3 Authority Key Identifier:
keyid:8A:B5:B9:A9:36:87:97:A8:6B:AE:BC:81:F6:23:B3:F4:E7:86:F5:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/irW5qTaHl6hrrryB9iOz9OeG9Ro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/64c431-5330-437b-b207-28fecc63398c/1/irW5qTaHl6hrrryB9iOz9OeG9Ro.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/64c431-5330-437b-b207-28fecc63398c/1/irW5qTaHl6hrrryB9iOz9OeG9Ro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:ff:e1:17:19:6f:db:a3:c2:bb:80:4a:8e:fb:cd:a4:5c:dc:
7f:a9:d6:66:ae:f8:1c:b0:fe:fe:a3:05:97:31:d2:0e:3f:de:
97:24:5d:75:88:3e:9e:dd:eb:72:53:7a:8d:b7:71:ef:e3:cc:
dd:41:9c:f0:93:90:d2:f7:7f:67:f5:06:a0:f3:ed:cd:11:7e:
93:30:ad:03:37:64:fd:35:a5:68:f6:42:50:b7:fd:9e:60:c7:
a6:cf:0f:a8:f1:05:2a:89:d6:ba:1f:24:be:a3:03:6e:ce:02:
ba:15:2e:a1:2e:ba:36:12:c9:cb:97:18:57:0c:2b:a8:13:a8:
67:ec:e9:f1:60:ca:4c:70:57:b3:dc:32:92:ea:7a:ba:68:7a:
91:5f:68:15:13:be:32:55:dd:cd:28:95:95:70:85:fe:7e:a3:
d7:e9:70:d4:5a:80:44:a0:df:61:39:28:58:f6:be:e3:b7:b9:
62:ae:7a:ca:27:c2:6d:2b:21:9a:93:97:b6:64:2e:13:b9:17:
34:be:63:f3:6f:13:d4:e5:cd:94:49:19:d2:50:d4:15:82:04:
7b:b3:3d:77:33:c3:f5:bd:ae:02:bf:0a:90:61:76:88:58:51:
34:31:08:b1:5e:77:4e:4b:38:62:5f:0e:b0:a1:b7:98:ce:d4:
b3:d9:29:f7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytWU4CdWyQD8OeJED5wR17MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhYjViOWE5MzY4Nzk3YTg2YmFlYmM4MWY2MjNiM2Y0ZTc4
NmY1MWEwHhcNMjYwMzAyMDcwMDM2WhcNMjYwMzAzMDcwMDM2WjAzMTEwLwYDVQQD
EyhlM2EzY2Q4MTg3ZDU3NTkwNzEyMGY4NjQ5ZmM3NGZiZWY5ZGEwY2ZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArLwmD7lNBnS7JWtzHAEys+CFF3Dv
Jc7J/CU4qPuApjtpY+pbqMBJnebwxM6cQ89H9AD5ZM2Q785MSzoHysan31l2w5hh
uxw8uB/+8NNcx4fws+FBId6DrTvKq7UwAYZXpWcw5e/WuEINHP6jLzyaFk2Hd8vg
aRfy4x+YDI1Ks9wcmUbihP8mcMNb6b9AkaABAtyzgla4jCprbZO+k8OURV8NcSbL
pt1YoYS43g9RGpFYEn+6CkoLK/e3Z3SZHRWS3eFNqf9BOLZ9/PTwzhxrsrWdc85Q
Egs4sd9OmZEqg8LAfb6WIAr4l/EgP7PD3yRE6Vf+oPSeYSUwYnuRbbBZrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOOjzYGH1XWQcSD4ZJ/HT7752gz/MB8GA1UdIwQY
MBaAFIq1uak2h5eoa668gfYjs/TnhvUaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaXJXNXFUYUhsNmhycnJ5QjlpT3o5T2VHOVJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy82NGM0MzEtNTMzMC00MzdiLWIyMDct
MjhmZWNjNjMzOThjLzEvaXJXNXFUYUhsNmhycnJ5QjlpT3o5T2VHOVJvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy82NGM0MzEtNTMzMC00MzdiLWIyMDctMjhmZWNjNjMzOThj
LzEvaXJXNXFUYUhsNmhycnJ5QjlpT3o5T2VHOVJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA//hFxlv
26PCu4BKjvvNpFzcf6nWZq74HLD+/qMFlzHSDj/elyRddYg+nt3rclN6jbdx7+PM
3UGc8JOQ0vd/Z/UGoPPtzRF+kzCtAzdk/TWlaPZCULf9nmDHps8PqPEFKonWuh8k
vqMDbs4CuhUuoS66NhLJy5cYVwwrqBOoZ+zp8WDKTHBXs9wykup6umh6kV9oFRO+
MlXdzSiVlXCF/n6j1+lw1FqARKDfYTkoWPa+47e5Yq56yifCbSshmpOXtmQuE7kX
NL5j828T1OXNlEkZ0lDUFYIEe7M9dzPD9b2uAr8KkGF2iFhRNDEIsV53Tks4Yl8O
sKG3mM7Us9kp9w==
-----END CERTIFICATE-----
Generated at Mon Mar 2 15:59:53 2026 by rpki-client